Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa
File:                     3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa (raw, json)
Hash identifier:          wv0TUWy2sYLRDdIPySCeV6HZRhTlJeItSupRLq88RjU=
Subject key identifier:   ED:7C:D8:35:85:D9:E6:E0:37:32:8C:D2:2B:B7:2D:FF:C4:6F:89:00
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       3E4EDF1F80149FAD323E1AE99496F94F727BB221
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa
Signing time:             Tue 07 Apr 2026 14:30:27 +0000
ROA not before:           Tue 07 Apr 2026 14:25:27 +0000
ROA not after:            Tue 06 Apr 2027 14:30:27 +0000
asID:                     262315
IP address blocks:        177.124.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl
                          rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4e:df:1f:80:14:9f:ad:32:3e:1a:e9:94:96:f9:4f:72:7b:b2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: Apr  7 14:25:27 2026 GMT
            Not After : Apr  6 14:30:27 2027 GMT
        Subject: CN=ED7CD83585D9E6E037328CD22BB72DFFC46F8900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:e9:84:bc:0c:5f:6f:24:82:20:1c:4e:a7:
                    01:d5:6f:d5:6f:1b:92:5e:80:1e:5a:dc:24:70:16:
                    d9:45:60:5f:6b:83:a8:3d:b3:cc:6a:52:85:a2:20:
                    8e:de:0c:16:ba:5f:ab:ca:6b:53:e3:cc:11:2c:77:
                    e6:5f:b6:3e:27:24:e5:bc:11:22:ae:e6:0f:d9:91:
                    c4:7a:60:3e:7b:9c:38:89:3b:46:61:66:f1:e4:db:
                    10:91:62:d5:ba:23:d6:70:69:9b:59:4a:9b:85:07:
                    13:dc:66:28:dd:02:9e:9b:c2:aa:a1:bc:fd:53:d4:
                    17:b3:97:21:e4:9d:00:18:7d:86:5b:de:da:ae:de:
                    e6:ff:2e:22:54:42:db:e3:19:b3:11:72:8a:c2:3d:
                    72:69:ff:18:75:38:48:15:4e:46:f3:db:91:7c:0b:
                    e9:f2:f0:3e:6c:42:7d:ec:01:9c:6c:f8:38:76:e0:
                    20:0d:76:c7:6a:9b:3a:7e:61:32:fe:97:79:28:6b:
                    b0:94:79:a8:89:f5:b9:a3:fa:92:10:8f:95:c0:07:
                    f5:4d:d4:7a:3e:ef:e8:79:2a:4c:0e:a6:f4:1f:d2:
                    44:03:4f:51:f1:4f:4d:c6:d2:e8:f3:24:91:e1:e2:
                    43:25:99:52:3e:a3:10:bd:04:db:7a:ff:f3:ea:3e:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7C:D8:35:85:D9:E6:E0:37:32:8C:D2:2B:B7:2D:FF:C4:6F:89:00
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:c8:82:f6:79:36:24:bd:d7:24:c9:89:86:fe:5a:c1:ba:
         56:a3:85:7d:dd:32:df:3b:f9:2d:5d:a0:5e:49:99:36:ae:87:
         b5:93:0b:39:66:ae:8e:14:45:ae:6b:ca:5d:f7:10:68:d4:09:
         77:8b:3d:45:38:1b:12:d6:ed:e7:6d:f3:1c:fe:61:1a:87:c4:
         98:44:81:0d:1d:c5:41:28:f4:77:da:33:81:d0:f2:a3:71:e4:
         d6:15:45:bf:23:a9:13:6f:50:b2:0a:83:ef:89:93:2b:b9:1b:
         de:b1:64:50:da:d0:6a:b2:c3:9b:ce:31:7a:c4:5f:0a:b9:cc:
         ea:af:54:80:0c:87:93:70:48:b0:53:a4:a0:b2:59:77:44:f8:
         41:27:5e:cb:3d:b0:ee:d0:8f:6d:1a:6d:71:36:4f:b3:32:99:
         de:7f:13:ad:24:fd:7a:5e:e2:45:6e:28:51:70:7b:f8:08:c9:
         d6:2c:4a:97:dd:dd:5a:15:d7:e6:77:d1:f9:06:08:25:74:a3:
         ab:ee:62:8b:7a:b8:4f:f9:ab:1e:17:e2:36:25:d8:b0:98:98:
         12:8c:f8:44:a7:13:13:fa:56:b6:75:1b:24:f0:77:25:f2:fa:
         5f:c1:f3:bd:ef:7a:58:de:5b:e4:c5:f8:cf:26:c5:9b:d8:f6:
         7d:fe:80:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:01:41 2026 by rpki-client